CVE-2025-11546 — NEC Corporation / CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux)

Description (CNA)

CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends specially crafted network packets to the product, arbitrary OS commands may be executed without authentication.

Affected (CNA)

Vendor / product	Versions
NEC Corporation / CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux)	affected 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2
NEC Corporation / CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux)	affected 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2

CWE

CWE-78

References

https://jpn.nec.com/security-info/secinfo/nv25-006_en.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.